Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: RyYxpEVcr8VXu8n94kH39QO/ik62i6/66sPLWmGNkCU=
Subject key identifier: 99:6B:CE:A6:51:49:18:BE:A3:F0:4B:88:E8:B2:A5:8A:6F:A4:03:B1
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 019D26CD2A50E84299BE88EA6BB12F271471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: HG7ijZVNEuXDrc2Vj5yqn/JQirn+k6yJrKFo2KkP+TA=)
2: p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa (hash: V5+8Cu1ZSU54lkDzthadhaeHWXQzx9+t4lsqXq/ECiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:50:e8:42:99:be:88:ea:6b:b1:2f:27:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=996bcea6514918bea3f04b88e8b2a58a6fa403b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:cf:f6:fc:af:36:b0:83:64:e7:20:34:79:
2a:82:6e:74:c7:3f:09:e7:91:51:a2:30:d2:20:d8:
1a:fd:13:b1:6c:f9:a9:38:b9:70:83:29:ec:7c:a6:
b7:aa:8b:e1:db:1d:fd:86:1b:6e:44:f4:44:8b:b7:
fa:4d:64:76:8a:c9:17:e6:85:22:b7:ce:d0:b8:15:
df:b6:89:2f:b5:02:f1:01:8a:33:85:fa:42:77:39:
3e:d1:50:21:e9:05:54:31:c3:39:ed:99:e3:2d:97:
e2:13:36:c4:9b:5a:f4:bd:f5:73:e6:61:4f:16:33:
db:35:4e:d5:55:08:44:5b:f1:b4:79:37:8e:82:3f:
8a:39:ba:c2:11:96:6f:df:4d:7a:3f:78:0c:76:e5:
2f:71:e8:5c:7a:77:8b:a2:f2:e5:3b:6d:2a:07:6f:
29:f9:4c:46:50:57:a5:09:df:24:41:77:9a:f2:76:
64:25:e4:b5:6c:94:f0:4e:68:8d:fa:41:39:79:69:
54:0f:6f:43:6d:01:29:06:66:49:a8:bc:8c:3f:cc:
dc:df:45:cb:a4:f0:0f:99:bd:0e:4f:b1:a4:67:4e:
c0:58:34:bb:75:be:86:3b:f4:07:fc:09:cd:30:b5:
ae:50:af:e7:8f:dd:bb:89:4e:cd:eb:02:a6:dc:f4:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:CE:A6:51:49:18:BE:A3:F0:4B:88:E8:B2:A5:8A:6F:A4:03:B1
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:18:01:02:02:70:26:3b:1c:11:f3:b2:61:80:33:b9:41:
c0:55:6d:8f:28:69:86:cb:6e:ac:ca:62:48:27:8d:cd:fc:be:
e4:be:33:22:09:9f:fb:e2:b4:86:70:37:db:5e:83:53:d7:61:
e7:5e:0e:f6:b4:ab:3a:e8:59:bf:08:88:2d:4f:af:92:a1:23:
26:58:2e:69:f0:56:92:33:4d:bd:b6:eb:7a:91:0a:d4:25:87:
a9:0f:e2:09:36:a3:37:80:1f:ed:64:5b:98:8b:15:95:80:c6:
2d:a1:81:84:bf:ab:64:3d:85:ae:e6:58:44:2d:f8:7c:1a:a2:
4b:84:10:3c:f0:6d:d2:7a:16:de:62:cc:ca:ea:43:90:ad:ec:
62:de:77:4e:ad:c1:4b:83:13:28:bc:47:8a:21:30:0f:31:c2:
a9:30:be:6d:f2:ce:8f:c0:b4:ad:81:20:ce:43:fd:08:5e:36:
67:19:11:53:c3:ce:ff:95:2f:a3:2c:b3:bf:b1:4f:43:b5:3a:
9d:ea:b9:30:9a:00:5f:55:04:a4:07:7b:5f:72:21:8d:a7:61:
3c:2a:25:c1:eb:63:fa:1d:84:15:a8:9e:d9:3b:aa:1d:ce:08:
03:09:aa:b1:ed:86:4d:c7:a6:f8:29:84:dc:c7:53:70:71:43:
f5:a0:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:32 2026 by rpki-client